Comment on Show HN: Stratoshark, a sibling application to WiresharkparentComments−geraldcombsOP1yIt uses Falco libs[1] underneath, which supports capture using eBPF or a kmod. I work with the Falco libs team and they go to great lengths to minimize overhead.[1]https://github.com/falcosecurity/libs/
Comments
It uses Falco libs[1] underneath, which supports capture using eBPF or a kmod. I work with the Falco libs team and they go to great lengths to minimize overhead.
[1]https://github.com/falcosecurity/libs/